Privacy Policy

• Account: your name and email address. If you set a password, we store only a one-way hash of it. Email sign-in codes are stored only as a hash and expire after 10 minutes.
• Checks: the URLs you check, the screen sizes and options you pick, screenshots of those pages, the issues found, and reports you export.
• Usage and device: your IP address and a device cookie, used for daily limits, security and showing your recent checks.
• Billing: handled by Dodo Payments. We receive your customer and subscription IDs, plan, renewal date and invoices; we never see or store your full card details.
• Comments and sign-off: what you and your team write on pages, the picture of the spot it is about, and which pages you approved and when.
• Feedback widget (optional, on our customers’ sites): when a customer adds our Feedback button to their site and a visitor uses it, we receive what the visitor sends: their name, their email if they give one, their comment, a picture of the page as they saw it with their marks (they can blur parts first), the page address, their browser, system and window size, console errors and failed request addresses from that page, the steps they took in the minute before (which buttons and links they clicked, pages they went to, how far they scrolled and which fields they used, never what they typed), any answers to the customer’s own questions, and, if they choose to record their screen, that recording (up to a minute; their browser asks for permission first). We keep it for that customer, who decides what to do with it; the visitor’s email is used only to tell them when it is resolved. Nothing leaves the visitor’s browser until they press Send.
• Figma (optional): if you connect Figma, an access token, stored encrypted, and your Figma handle.

To sign you in, run checks and live sessions, show and share your reports, take payments, send service emails (sign-in codes, password resets, report-ready notices, billing), prevent abuse, and improve UICheck. We do not sell your personal data, and we do not use your checked pages or screenshots to train AI models.

Only with providers that run parts of the service for us, under their own privacy and security terms:

• Railway (hosting and database)
• Linode / Akamai object storage (screenshots and reports)
• Resend (emails)
• Dodo Payments (payments, taxes and invoices)
• Google Analytics (anonymous site usage on our public pages)
• Figma (only if you connect it, to read the frames you link)

We may also share information if required by law, or to protect our users and service.

We use a session cookie to keep you signed in, a device cookie for limits and recent checks, and a short-lived cookie during Figma sign-in. Google Analytics sets cookies on our public pages to measure visits.

We keep your account until you delete it. Checks (their reports, screenshots and PDF/Excel files) are deleted automatically 90 days after they run on the Free plan and 1 year after on Lens and Prism. We always keep the latest check of each page, the last check of a page you monitor, and any check approved as a baseline. Results of the free Mobile-Friendly Test are kept for 90 days. You can delete any check sooner yourself. Deleting your account removes your checks, screenshots, reports and connected tools. Billing records are kept by us and Dodo Payments for as long as tax and accounting law requires.

Data is sent over HTTPS. Passwords and sign-in codes are hashed, Figma tokens are encrypted, screenshots are only reachable through short-lived links, and reports are private unless you share them. No system is perfectly secure; tell us at ping@fulgid.in if you find a problem.

You can see and update your name in Account, download a copy of your data there (Account → Your data, a JSON file), and delete your account and data at any time. For any other request about your personal data, email ping@fulgid.in. Depending on where you live (for example under GDPR or India’s DPDP Act), you may also have rights to object, restrict processing or complain to a regulator.

UICheck is a professional tool and is not meant for children under 16.

Our providers may process data outside your country. Where required, we rely on appropriate safeguards for these transfers.

We will post updates on this page and, for significant changes, email account holders.